formentry-x[.]com
“Parked Domain name on Hostinger DNS system”
Résumé des preuves
The domain formentry-x.com is identified as a Social Media Phishing vector. It was registered on 23 February 2026 through Hostinger operations, UAB, and the registration details are publicly visible. The domain resolves to the IPv4 address 84.32.84.32, which is announced by AS47583 Hostinger International Limited and geolocated to Lithuania. Authoritative name servers are ns1.dns-parking.com and ns2.dns-parking.com, and no TLS certificate is presented, indicating the site does not serve HTTPS traffic. The only HTTP response observed is a generic parked‑domain page whose title reads “Parked Domain name on Hostinger DNS system”.
The domain is currently taken offline, and no active content has been captured. Despite the lack of a live payload, the domain appears on three independent security blocklists and has been flagged by one of ninety‑three vendors on VirusTotal, demonstrating that security tooling has associated it with malicious activity. The presence of a registrar tied to a popular hosting provider, combined with the blocklist listings and the vendor detection, suggests that the domain was either prepared for or briefly used in a phishing campaign targeting social‑media accounts. However, the exact phishing page, lure content, or credential‑harvesting mechanism has not been observed, leaving the specific attack flow uncertain.
Defenders should proactively block both the domain name and its resolving IP address at perimeter and DNS filters. Continuous monitoring of the domain’s DNS records is advised to detect any re‑activation or redirection to malicious content. Adding the domain to internal threat‑intel feeds and sharing the indicator set with partner organizations can help prevent reuse. Given the hosting environment, any future domains created under the same registrar or IP range should be scrutinized for similar blocklist activity.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
8 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif